• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 657
  • Last Modified:

getting lots of kernel: martian source errors in my message log

I have a linux box that is getting lots of errors ( i assume they are errors) in the message log file

they all come from one source
Jan  4 11:29:54 millhouse kernel: martian source from 216.xxx.xxx.xxx, on dev eth1
Jan  4 11:29:54 millhouse kernel: ll header: ff:ff:ff:ff:ff:ff:00:xx:xx:xx:xx:xx:xx:xx

any help on how to debug this?

1 Solution
The error is telling you that an external IP 2156.xxx.xxx.xxx is reporting itself as an rfc1918 type address i.e. which is not routable so cannot possibly be honest - i.e. it's being spoofed (from Mars or another planet...).  
I think the error comes from iptables, and you may be able to disable it in your iptables config

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now